Security & Fraud

KFC’s Loyalty Program Gets Hacked, 1.2 Million At Risk

KFC is the latest company to report a hack, with the bad guys breaching its Colonel’s Club loyalty program.

According to a report by Forbes, which cited U.K.’s ITV, the hackers were able to steal personally identifiable information of the members of the loyalty program. The report noted that KFC is hoping to limit the impact of the breach because it acted quickly to remedy the situation. KFC reportedly only found 30 accounts that were compromised so far. Even though it may not result in a massive breach, KFC did sent out emails to its 1.2 million users to change their passwords and are also reminding anyone who has reused a password and email address combination to change those as well. The report noted that, because only a small amount of consumers appear to be impacted, it may be the bad guys are trying to reuse credentials from other password hacks.

The report noted that KFC isn’t forcing customers to change their passwords and are only recommending, which the report said doesn’t seem like KFC is going far enough to protect its customers. The email to customers also stated: “It’s extremely unlikely that [individual users] have been impacted,” reported Forbes. For KFC’s part, it pointed out that the company’s database doesn’t include payment information whatsoever. It is also putting in place “additional safety measures to further safeguard … members’ accounts,” Forbes cited KFC as saying. Companies getting hacked is becoming more common these days as hackers go after bigger fish. Organizations act like they are prepared, but they may not be able to protect their systems from the hackers.


Featured PYMNTS Study: 

With eyes on lowering costs to improving cash flow, 85 percent of U.S. firms plan to make real-time payments integral to their operations within three years. However, some firms still feel technical barriers stand in the way. In the January 2020 Making Real-Time Payments A Reality Study, PYMNTS surveyed more than 500 financial executives to examine what it will take to channel RTP interest into real-world adoption. Here’s what we learned.

Click to comment